fix: add skipVerification workaround for MacOS notarize

.changeset/thin-bags-tap.md

@@ -0,0 +1,5 @@
+---
+"app-builder-lib": major
+---
+
+Add skipVerification flag in Mac's notarize options

packages/app-builder-lib/scheme.json

@@ -3716,6 +3716,13 @@
             "string"
           ]
         },
+        "skipVerification": {
+          "description": "Skip spctl verification when notarizing. Needed in some edge-cases when running electron-builder in CI",
+          "type": [
+            "null",
+            "boolean"
+          ]
+        },
         "teamId": {
           "description": "The team ID you want to notarize under. Only needed if using `notarytool`",
           "type": [

packages/app-builder-lib/src/macPackager.ts

@@ -489,7 +489,11 @@ export default class MacPackager extends PlatformPackager<MacConfiguration> {
     const options = this.generateOptions(appPath, appleId, appleIdPassword)
     await notarize(options)
     // Verify
-    await spawn("spctl", ["-a", "-t", "open", "--context", "context:primary-signature", "-v", `"${appPath}"`])
+    if (typeof notarizeOptions === "object" && notarizeOptions?.skipVerification) {
+      log.info({ reason: "`skipVerification` is explicitly set to true" }, "skipped spctl verification")
+    } else {
+      await spawn("spctl", ["-a", "-t", "open", "--context", "context:primary-signature", "-v", `"${appPath}"`])
+    }
     log.info(null, "notarization successful")
   }
 

packages/app-builder-lib/src/options/macOptions.ts

@@ -230,6 +230,11 @@ export interface NotarizeOptions {
    * The team ID you want to notarize under. Only needed if using `notarytool`
    */
   readonly teamId?: string | null
+
+  /**
+   * Skip spctl verification when notarizing. Needed in some edge-cases when running electron-builder in CI
+   */
+  readonly skipVerification?: boolean | null
 }
 
 export interface DmgOptions extends TargetSpecificOptions {